Digital rights management

❗Article Status Notice: Unacceptable Tone/Word Usage

Notice: This Article Requires Change in Tone

---

This article needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Specifically it uses wording throughout that is non-compliant with the Editorial guidelines of this wiki.

How You Can Help:

If this is a non-Theme article:

• Persuasive language should not be used in the Wiki's voice. Avoid loaded words, or the causing of unnecessary offense, wherever possible.
• No direct attacks on named individuals or companies. Malice may be attributed to bad and proven offenders, but only through the use of quotation and citation - never in the Wiki's voice.

If this is a Theme article:

• Where argumentation is used make sure it is clear and direct but not inflammatory. Avoid strong language, or causing unnecessary offense.
• No direct attacks on named individuals or companies. Malice may be attributed to bad and proven offenders, in a formal and calm manner.

This notice will be removed once sufficient documentation has been added to establish the systemic nature of these issues. Once you believe the article is ready to have its notice removed, visit the Discord (join here) and post to the #appeals channel.

⚠️ Article status notice: This article has been marked as incomplete

This article needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues.

This notice will be removed once sufficient documentation has been added to establish the systemic nature of these issues. Once you believe the article is ready to have its notice removed, visit the discord and post to the #appeals channel.

Learn more ▼

This Article Requires Additional Verification

---

This article has been flagged due to verification concerns. While the topic might have merit, the claims presented lack citations that live up to our standards, or rely on sources that are questionable or unverifiable by our standards. Articles must meet the Moderator Guidelines and Mission statement; factual accuracy and systemic relevance are required for inclusion here!

Why This Article Is In Question

---

Articles in this wiki are required to:

• Provide verifiable & credible evidence to substantiate claims.
• Avoid relying on anecdotal, unsourced, or suspicious citations that lack legitimacy.
• Make sure that all claims are backed by reliable documentation or reporting from reputable sources.

Examples of issues that trigger this notice:

• A topic that heavily relies on forum posts, personal blogs, or other unverifiable sources.
• Unsupported claims with no evidence or citations to back them up.
• Citations to disreputable sources, like non-expert blogs or sites known for spreading misinformation.

How You Can Improve This Article

---

To address verification concerns:

• Replace or supplement weak citations with credible, verifiable sources.
• Make sure that claims are backed by reputable reporting or independent documentation.
• Provide additional evidence to demonstrate systemic relevance and factual accuracy. For example:
  • Avoid: Claims based entirely on personal anecdotes or hearsay without supporting documentation.
  • Include: Corporate policies, internal communications, receipts, repair logs, verifiable video evidence, or credible investigative reports.

If you believe this notice has been placed in error, or once the article has been updated to address these concerns, please visit the #appeals channel on our Discord server: Join here.

Digital rights management (DRM) broadly refers to any kind of access control technology that is used to deliberately restrict the usage of media content or devices after the sale. It is typically used by a seller to prevent unauthorized distribution or replication of their product. Implementations of DRM can range from very simple (such as a basic disc check) to extremely complex executable binary protection (such as Denuvo).

DRM creates a damaged good; it prevents you from doing what would be possible without it. – Defective by Design

DRM in video content

Attempting to protect video content is one of the most common uses of DRM. The idea of using copy protection on video content predates the term "DRM", one early example being the "Automatic Gain Control" requirement in VCRs used to enforce the "Macrovision" copy protection scheme. This requirement resulted in VCRs not being able to record commercial VHS tapes^{[citation needed]}.

From 1996, DVDs began to feature the "Content Scramble System" (CSS), an encryption based DRM. CSS was successfully circumvented as early as 1999, less than five years after its introduction, partly due to the limited length of the 40-bit encryption key, which was used to comply with US government export regulations of the time. Following this, DVDs as well as HD-DVDs and Blu-Rays would implement other types of DRM, one of them being the "Advanced Access Content System". When the AACS key was similarly extracted, the AACS Licensing Administrator began issuing cease-and-desist letters to websites where the key was posted. Another form of Blu-Ray DRM, Cinavia, uses a form of audio watermarking that makes certain releases unplayable in devices that are not equipped to recognize it, a notable example being Sony's Playstation 3.

In the attempt of preventing video ripping via a capture card, modern displays, optical disc players, and computers use the High-Definition Content Protection system to encrypt display signals. For example, Netflix will refuse to stream content at the full resolution advertised for the plan if the user is not streaming through an HDCP compliant video card and display.

DRM in audio content

DRM's strangest inclusion was in audio content, which was rarely implemented due to audio's analog nature (compared to video and software), making it questionable whether it could effectively block data replication. The most notable application of audio DRM was MediaMax, which essentially functioned as malware to prevent users from simply playing these audio discs on Windows and macOS. There was also the less-notable Extended Copy Protection (XCP) DRM, however it did leave Sony in hot water, dubbing this form of DRM also as the Sony Rootkit.

DRM in software

Most discussions about DRM often associate its use with some form of software protection, from the simple product key, to the infamous Denuvo DRM. Historically, DRM started off with simpler physical techniques, such as decoder wheels and LensLok. The effectiveness of these systems varied, and many cracking groups simply found ways around them, especially since second-hand copies of software that used these primitive forms of DRM could easily become lost, damaged, or worse, fail to function with certain hardware. This has essentially sparked a game of cat and mouse that continues to fester, especially for the gaming community, to this day.

Consumer rights issues with DRM

DRM, by definition, is designed to make content less compatible with devices. This means there is a higher likelihood of software or hardware refusing to play content due to buggy or overly restrictive DRM. For example, with the aforementioned Netflix HDCP requirement, it is not enough for the display you intend to watch the content on to support HDCP—all monitors connected to the system must support it. This means that on PCs with multi-monitor setup PC, older but fully functional monitors cannot be used as secondary screens without violating Netflix’s DRM restrictions.

Such requirements are not always clearly disclosed. When they are, they are often buried in the Terms of Service or, in Netflix's case, require navigating through multiple FAQ pages. Furthermore, some content may surreptitiously install DRM without the knowledge or consent of the user, such as in the Sony Rootkit scandal. Such software may contain exploits that can compromise the security of the user's PC.

DRM in video games has frequently been implemented in an intrusive manner, hurting load times and performance. This behavior has been more a result of negligent usage of the DRM rather than deliberate malicious intent.

DRM failures can also come as a surprise. For example, with a YouTube Premium subscription, you can "Download videos to watch offline", but such videos are only available for 48 hours without an internet connection. This creates confusion and problems, as users may want to download videos in anticipation of a period without internet access.

Ineffectiveness of audio and video DRM

Non-interactive content such as audio and video is nearly impossible to protect from copying once it is distributed to the consumer. Many HDMI splitters and capture cards are capable of decrypting HDCP and copying the video stream. As long as at least one bypass exists at the HDCP level, all streaming content can be trivially ripped.

Audio DRM is trivial to bypass, as the audio must be decrypted into a plain analog signal in order to drive physical speakers or headphones.

DRM degradation

The development of some forms of DRM, such as Games For Windows Live, are reliant on special processes within some operating systems that end up becoming unsupported or deprecated as time goes on. Legacy SecuROM-protected titles (released roughly between 1998 and 2005) are notoriously known for not running on operating systems newer than Windows XP. Customers must spend an extensive amount of time circumventing the DRM (or using more illicit methods) just to play content they legitimately purchased.

This DRM degradation has the worst effects on physical licenses of products, as unlike a digital installation, if a physical copy of a game's DRM stops being supported by modern hardware, developers cannot simply distribute a patch to directly modify the code on a disc, and online patches cannot last forever.

Always-online DRM

Some DRM requires a constant internet connection. While this may make sense in something that inherently requires an internet connection such as a streaming service or multiplayer-only video game, this has also been employed in games with single-player content, rendering customers unable to use their purchase if they do not have an active internet connection. Conversely, if operations for these services are shut down, user, even those with legitimate copies of software and internet access, cannot run their games without resorting to hacking them first. Ubisoft has historically been known for server shutdowns and transfers cutting off access to games for many players.

DRM present elsewhere

Printer Ink

See also: HP Dynamic Security

Companies such as HP only allow printers to only use ink sold by the same brand. There are a number of DRM systems employed by different companies to this end, an example of which is HP Dynamic Security, which has caught controversy during recent years.